Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-22909
HistoryJan 10, 2023 - 12:00 a.m.

CVE-2023-22909

2023-01-1000:00:00
ubuntu.com
ubuntu.com
23
mediawiki
remote attack
denial of service
cve-2023-22909
database queries

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

51.1%

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x
before 1.38.5, and 1.39.x before 1.39.1. SpecialMobileHistory allows remote
attackers to cause a denial of service because database queries are slow.

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

51.1%